lnmp1.5 生成通配符ssl问题！

unosky

生成证书出现问题后 再次生成出现如下提示：

1. Create new order error. Le_OrderFinalize not found. {"type":"urn:ietf:params:acme:error:malformed","detail":"Error creating new order :: Domain name "www.xxx.com" is redundant with a wildcard domain in the same request. Remove one or the other from the certificate request.","status": 400}

复制代码

下面是acme日志

1. [Thu Apr 26 23:10:11 CST 2018] _main_domain='www.xxx.com'
   
2. [Thu Apr 26 23:10:11 CST 2018] _alt_domains='xxx.com,*.xxx.com'
   
3. [Thu Apr 26 23:10:11 CST 2018] Using config home:/usr/local/acme.sh
   
4. [Thu Apr 26 23:10:11 CST 2018] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
   
5. [Thu Apr 26 23:10:11 CST 2018] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.xxx.com'
   
6. [Thu Apr 26 23:10:11 CST 2018] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
   
7. [Thu Apr 26 23:10:11 CST 2018] _init api for server: https://acme-v02.api.letsencrypt.org/directory
   
8. [Thu Apr 26 23:10:11 CST 2018] GET
   
9. [Thu Apr 26 23:10:11 CST 2018] url='https://acme-v02.api.letsencrypt.org/directory'
   
10. [Thu Apr 26 23:10:11 CST 2018] timeout=
    
11. [Thu Apr 26 23:10:11 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
    
12. [Thu Apr 26 23:10:11 CST 2018] ret='0'
    
13. [Thu Apr 26 23:10:12 CST 2018] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
    
14. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_AUTHZ
    
15. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
    
16. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
    
17. [Thu Apr 26 23:10:12 CST 2018] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
    
18. [Thu Apr 26 23:10:12 CST 2018] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
    
19. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
    
20. [Thu Apr 26 23:10:12 CST 2018] ACME_VERSION='2'
    
21. [Thu Apr 26 23:10:12 CST 2018] _on_before_issue
    
22. [Thu Apr 26 23:10:12 CST 2018] _chk_main_domain='www.xxx.com'
    
23. [Thu Apr 26 23:10:12 CST 2018] _chk_alt_domains='xxx.com,*.xxx.com'
    
24. [Thu Apr 26 23:10:12 CST 2018] Le_LocalAddress
    
25. [Thu Apr 26 23:10:12 CST 2018] d='www.xxx.com'
    
26. [Thu Apr 26 23:10:12 CST 2018] Check for domain='www.xxx.com'
    
27. [Thu Apr 26 23:10:12 CST 2018] _currentRoot='dns_dp'
    
28. [Thu Apr 26 23:10:12 CST 2018] d='xxx.com'
    
29. [Thu Apr 26 23:10:12 CST 2018] Check for domain='xxx.com'
    
30. [Thu Apr 26 23:10:12 CST 2018] _currentRoot='dns_dp'
    
31. [Thu Apr 26 23:10:12 CST 2018] d='*.xxx.com'
    
32. [Thu Apr 26 23:10:12 CST 2018] Check for domain='*.xxx.com'
    
33. [Thu Apr 26 23:10:12 CST 2018] _currentRoot='dns_dp'
    
34. [Thu Apr 26 23:10:12 CST 2018] d
    
35. [Thu Apr 26 23:10:12 CST 2018] _saved_account_key_hash is not changed, skip register account.
    
36. [Thu Apr 26 23:10:12 CST 2018] Read key length:
    
37. [Thu Apr 26 23:10:12 CST 2018] Creating domain key
    
38. [Thu Apr 26 23:10:12 CST 2018] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
    
39. [Thu Apr 26 23:10:12 CST 2018] Using config home:/usr/local/acme.sh
    
40. [Thu Apr 26 23:10:12 CST 2018] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
    
41. [Thu Apr 26 23:10:12 CST 2018] Use length 2048
    
42. [Thu Apr 26 23:10:12 CST 2018] Using RSA: 2048
    
43. [Thu Apr 26 23:10:12 CST 2018] The domain key is here: /usr/local/nginx/conf/ssl/www.xxx.com/www.xxx.com.key
    
44. [Thu Apr 26 23:10:12 CST 2018] _createcsr
    
45. [Thu Apr 26 23:10:12 CST 2018] Multi domain='DNS:www.xxx.com,DNS:xxx.com,DNS:*.xxx.com'
    
46. [Thu Apr 26 23:10:12 CST 2018] Getting domain auth token for each domain
    
47. [Thu Apr 26 23:10:12 CST 2018] d='xxx.com'
    
48. [Thu Apr 26 23:10:12 CST 2018] d='*.xxx.com'
    
49. [Thu Apr 26 23:10:12 CST 2018] d
    
50. [Thu Apr 26 23:10:12 CST 2018] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
    
51. [Thu Apr 26 23:10:12 CST 2018] payload='{"identifiers": [{"type":"dns","value":"www.xxx.com"},{"type":"dns","value":"xxx.com"},{"type":"dns","value":"*.xxx.com"}]}'
    
52. [Thu Apr 26 23:10:12 CST 2018] RSA key
    
53. [Thu Apr 26 23:10:12 CST 2018] HEAD
    
54. [Thu Apr 26 23:10:12 CST 2018] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
    
55. [Thu Apr 26 23:10:12 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
    
56. [Thu Apr 26 23:10:12 CST 2018] _ret='0'
    
57. [Thu Apr 26 23:10:12 CST 2018] POST
    
58. [Thu Apr 26 23:10:12 CST 2018] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
    
59. [Thu Apr 26 23:10:12 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
    
60. [Thu Apr 26 23:10:13 CST 2018] _ret='0'
    
61. [Thu Apr 26 23:10:13 CST 2018] code='400'
    
62. [Thu Apr 26 23:10:13 CST 2018] Le_OrderFinalize
    
63. [Thu Apr 26 23:10:13 CST 2018] Create new order error. Le_OrderFinalize not found. {"type":"urn:ietf:params:acme:error:malformed","detail":"Error creating new order :: Domain name "www.xxx.com" is redundant with a wildcard domain in the same request. Remove one or the other from the certificate request.","status": 400}
    
64. [Thu Apr 26 23:10:13 CST 2018] pid
    
65. [Thu Apr 26 23:10:13 CST 2018] No need to restore nginx, skip.
    
66. [Thu Apr 26 23:10:13 CST 2018] _clearupdns
    
67. [Thu Apr 26 23:10:13 CST 2018] skip dns.
    
68. [Thu Apr 26 23:10:13 CST 2018] _on_issue_err
    
69. [Thu Apr 26 23:10:13 CST 2018] Please check log file for more details: /usr/local/acme.sh/acme.sh.log

复制代码

licess

生成通配符域名证书不要加带www的域名

unosky

还有个问题就是为已存在的网站申请系统会新建2个server段。。。是否优化下